Add iOS node push-token registration foundation

docs/plans/2026-02-16-ios-node-foundation-checklist.md

@@ -0,0 +1,53 @@
+# iOS Node Foundation Checklist
+
+**Date:** 2026-02-16  
+**Scope:** Close OpenClaw "iOS node" gap with push-token capable companion foundation.
+
+## Goal
+
+Extend node RPC so iOS companions can register APNs push tokens and operators can inspect iOS node readiness safely.
+
+## Implemented
+
+- Added protocol parser:
+  - `parseNodePushTokenSetParams()`
+- Added node RPC:
+  - `node.push_token.set`
+- Added node connection state support for push registration:
+  - provider, topic, environment, token, registeredAt
+- Added node policy config gate:
+  - `server.nodes.push.enabled` (default `false`)
+- Added push summary visibility in:
+  - `system.nodes` (masked `tokenPreview`, never full token)
+- Updated node capability snapshot:
+  - `system.capabilities.nodes.pushEnabled`
+- Updated role scopes:
+  - companion role allowed to call `node.push_token.set`
+
+## Safety Notes
+
+- Push tokens are stored in-memory for active node sessions.
+- Operator API responses expose only masked token previews.
+
+## Tests
+
+- `src/gateway/protocol.test.ts`
+  - push token parser valid/invalid cases.
+- `src/gateway/handlers/node.test.ts`
+  - push token registration path and masked preview response.
+- `src/gateway/server.test.ts`
+  - end-to-end `node.push_token.set` + `system.nodes` masked summary.
+- `src/gateway/auth.test.ts`
+  - role-scope coverage for `node.push_token.set`.
+- `src/gateway/handlers/handlers.test.ts`
+  - runtime config patch coverage for `server.nodes.push.enabled`.
+- `src/config/schema.test.ts`
+  - node push config defaults + custom parsing.
+
+## Validation Run
+
+```bash
+pnpm test:run src/gateway/protocol.test.ts src/gateway/auth.test.ts src/gateway/handlers/node.test.ts src/gateway/handlers/handlers.test.ts src/gateway/server.test.ts src/config/schema.test.ts
+pnpm typecheck
+pnpm build
+```

docs/plans/state.json

@@ -542,6 +542,36 @@
       ],
       "test_status": "pnpm test:run src/gateway/protocol.test.ts src/gateway/auth.test.ts src/gateway/handlers/node.test.ts src/gateway/handlers/handlers.test.ts src/gateway/server.test.ts + pnpm typecheck + pnpm build passing"
     },
+    "ios-node-foundation": {
+      "file": "2026-02-16-ios-node-foundation-checklist.md",
+      "status": "completed",
+      "date": "2026-02-16",
+      "updated": "2026-02-16",
+      "summary": "Implemented iOS node companion foundation by adding APNs push-token registration (`node.push_token.set`) behind `server.nodes.push.enabled`, plus masked push readiness visibility in `system.nodes` and node capability snapshots.",
+      "files_created": [
+        "docs/plans/2026-02-16-ios-node-foundation-checklist.md"
+      ],
+      "files_modified": [
+        "src/gateway/protocol.ts",
+        "src/gateway/protocol.test.ts",
+        "src/gateway/handlers/node.ts",
+        "src/gateway/handlers/node.test.ts",
+        "src/gateway/handlers/system.ts",
+        "src/gateway/handlers/index.ts",
+        "src/gateway/handlers/config.ts",
+        "src/gateway/handlers/handlers.test.ts",
+        "src/gateway/server.ts",
+        "src/gateway/server.test.ts",
+        "src/gateway/auth.test.ts",
+        "src/config/schema.ts",
+        "src/config/schema.test.ts",
+        "src/daemon/services.ts",
+        "config/default.yaml",
+        "README.md",
+        "docs/api/PROTOCOL.md"
+      ],
+      "test_status": "pnpm test:run src/gateway/protocol.test.ts src/gateway/auth.test.ts src/gateway/handlers/node.test.ts src/gateway/handlers/handlers.test.ts src/gateway/server.test.ts src/config/schema.test.ts + pnpm typecheck + pnpm build passing"
+    },
     "qmd-backend": {
       "file": "2026-02-16-qmd-backend-checklist.md",
       "status": "completed",
@@ -3103,7 +3133,7 @@
     }
   },
   "overall_progress": {
-    "total_test_count": 1786,
+    "total_test_count": 1792,
     "all_tests_passing": true,
     "p0_completion": "3/3 (100%)",
     "p1_completion": "4/4 (100%)",
@@ -3118,12 +3148,12 @@
     "tier2_completion": "4/4 (100%) — inbound webhooks, vector memory search, Dockerfile, heartbeat monitor",
     "tier3_completion": "5/5 (100%) — lane queue, credential redaction, web UI token dashboard, xAI (Grok) provider, Voyage AI embeddings",
     "tier4_completion": "4/4 (100%) — gateway lock, shell completion, Tailscale Serve/Funnel, DM pairing codes",
-    "feature_gap_scorecard": "121/128 match (95%), 0 partial (0%), 7 missing (5%)",
+    "feature_gap_scorecard": "122/128 match (95%), 0 partial (0%), 6 missing (5%)",
     "operator_dx_milestone": "Phase 3 (Live Ops Dashboard): 2/2 plans complete — milestone done",
     "gmail_auth_cli": "flynn gmail-auth command implemented with OAuth2 flow, doctor check, config routed to Telegram",
     "native_audio_support": "completed — smart routing for native audio (Gemini/OpenAI/GitHub) vs Whisper transcription fallback",
     "remaining_phases_completion": "Phase 1: 3/3 (100%) — context levels, command registry, memory structure. Phase 2: 3/3 (100%) — component registry, confidence routing, history index. Phase 3: 2/2 (100%) — adaptive memory/compaction, truthfulness/autonomy hardening",
-    "next_up": "OpenClaw gap: iOS node (open next scoped implementation checklist)"
+    "next_up": "OpenClaw gap: Android node (open next scoped implementation checklist)"
   },
   "soul_md_and_cron_create": {
     "date": "2026-02-11",